Lucene search
K

825 matches found

Vulnrichment
Vulnrichment
added 2013/04/13 1:0 a.m.8 views

CVE-2013-2596

Integer overflow in the fbmmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges,...

6.9AI score0.03373EPSS
Exploits1References16
Debian CVE
Debian CVE
added 2013/04/13 1:0 a.m.34 views

CVE-2013-2596

Integer overflow in the fbmmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges,...

7.8CVSS6.3AI score0.03373EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2013/04/13 12:0 a.m.54 views

CVE-2013-2596

Integer overflow in the fbmmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges,...

7.8CVSS5.7AI score0.03373EPSS
In wildExploits1References22
Positive Technologies
Positive Technologies
added 2013/04/13 12:0 a.m.3 views

PT-2013-3853 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 3.8.9 Description: The issue allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls. This i...

7.8CVSS6.9AI score0.05794EPSS
Exploits5References240
Tenable Nessus
Tenable Nessus
added 2013/01/25 12:0 a.m.46 views

SuSE 11.2 Security Update : Xen (SAT Patch Number 7018)

XEN was updated to fix various bugs and security issues : The following security issues have been fixed : - xen: Domain builder Out-of-memory due to malicious kernel/ramdisk XSA 25. CVE-2012-4544 - XEN / qemu: guest administrator can access qemu monitor console XSA-19. CVE-2012-4411 - xen: Timer...

6.9CVSS7.7AI score0.00443EPSS
Exploits0References26
Tenable Nessus
Tenable Nessus
added 2012/12/09 12:0 a.m.44 views

Debian DSA-2582-1 : xen - several vulnerabilities

Multiple denial of service vulnerabilities have been discovered in the Xen Hypervisor. One of the issue CVE-2012-5513 could even lead to privilege escalation from guest to host. Some of the recently published Xen Security Advisories XSA 25and 28 are not fixed by this update and should be fixed in...

6.9CVSS8AI score0.00443EPSS
Exploits5References32
OSV
OSV
added 2012/12/07 12:0 a.m.44 views

DSA-2582-1 xen - denial of service

Bulletin has no description...

6.9CVSS6.8AI score0.00443EPSS
Exploits5
RedHat Linux
RedHat Linux
added 2012/12/04 8:48 p.m.3 views

kernel: xen: Memory mapping failure can crash Xen

Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the setp2mentry function fails, which allows local HVM guest OS administrators to cause a denial of service memory consumption and assertion failure, aka "Memory mapping failure DoS...

2.1CVSS7.3AI score0.00433EPSS
Exploits0References4
OSV
OSV
added 2012/12/03 9:55 p.m.1 views

DEBIAN-CVE-2012-3432

The handlemmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service guest OS crash via unspecified...

1.9CVSS7.9AI score0.00642EPSS
Exploits1References1
OPENSUSE Linux
OPENSUSE Linux
added 2012/11/26 3:13 p.m.33 views

XEN: security and bugfix update (important)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

7.2CVSS0.2AI score0.01896EPSS
Exploits1References16
OSV
OSV
added 2012/11/21 11:55 p.m.7 views

CVE-2012-4537

Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the setp2mentry function fails, which allows local HVM guest OS administrators to cause a denial of service memory consumption and assertion failure, aka "Memory mapping failure DoS...

5.8AI score
Exploits0References23
Prion
Prion
added 2012/11/21 11:55 p.m.20 views

Information disclosure

Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the setp2mentry function fails, which allows local HVM guest OS administrators to cause a denial of service memory consumption and assertion failure, aka "Memory mapping failure DoS...

2.1CVSS6.7AI score0.00433EPSS
Exploits0References23Affected Software1
Debian CVE
Debian CVE
added 2012/11/21 11:0 p.m.27 views

CVE-2012-4537

Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the setp2mentry function fails, which allows local HVM guest OS administrators to cause a denial of service memory consumption and assertion failure, aka "Memory mapping failure DoS...

2.1CVSS4.8AI score0.00433EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2012/11/19 12:0 a.m.35 views

SuSE 10 Security Update : Xen (ZYPP Patch Number 8359)

XEN received various security and bugfixes : - xen: Timer overflow DoS vulnerability XSA-20. CVE-2012-4535 - xen: Memory mapping failure DoS vulnerability XSA-22 The following additional bugs have beenfixed:. CVE-2012-4537 - L3: Xen BUG at ioapic.c:129 26102-x86-IOAPIC-legacy-not-first.patch...

6.9CVSS7.8AI score0.00443EPSS
Exploits0References16
Xen Project
Xen Project
added 2012/11/13 11:56 a.m.10 views

Memory mapping failure DoS vulnerability

ISSUE DESCRIPTION When setp2mentry fails, Xen's internal data structures the p2m and m2p tables can get out of sync. This failure can be triggered by unusual guest behaviour exhausting the memory reserved for the p2m table. If it happens, subsequent guest-invoked memory operations can cause Xen t...

2.1CVSS7.2AI score0.00433EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.44 views

Scientific Linux Security Update : kvm on SL5.x x86_64

It was found that QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this flaw to cause the host to dereference an invalid pointer, causing the guest to crash denial of service or, possibly, resulting in th...

6.6CVSS5.4AI score0.00359EPSS
Exploits1References9
NVD
NVD
added 2012/06/13 10:24 a.m.26 views

CVE-2011-2496

Integer overflow in the vmatoresize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service BUGON and system crash via a crafted mremap system call that expands a memory mapping...

4.9CVSS6.4AI score0.00487EPSS
Exploits1References5
Prion
Prion
added 2012/06/13 10:24 a.m.26 views

Integer overflow

Integer overflow in the vmatoresize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service BUGON and system crash via a crafted mremap system call that expands a memory mapping...

4.9CVSS6.6AI score0.00487EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2012/06/13 10:0 a.m.26 views

CVE-2011-2496

Integer overflow in the vmatoresize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service BUGON and system crash via a crafted mremap system call that expands a memory mapping...

6.5AI score0.00487EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2011/10/20 5:20 p.m.3 views

kernel: mm: avoid wrapping vm_pgoff in mremap() and stack expansions

Integer overflow in the vmatoresize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service BUGON and system crash via a crafted mremap system call that expands a memory mapping...

4.9CVSS7.4AI score0.00487EPSS
Exploits1References4
Rows per page
Query Builder